Everything worth knowing, nothing that isn't.
Which GSMA specifications define Remote SIM Provisioning?
There are three families. SGP.01 and SGP.02 are the original machine-to-machine architecture, in which a central platform pushes profiles to devices. SGP.21 and SGP.22 are the consumer architecture used by smartphones, tablets and wearables, in which the user starts the download. SGP.31 and SGP.32 are the newer IoT architecture for devices with no screen, managed remotely through an eSIM IoT Remote Manager.
What are SM-DP+, SM-DS and the LPA?
The SM-DP+ (Subscription Manager – Data Preparation) creates each profile, encrypts it for one specific eUICC and delivers it. The SM-DS (Subscription Manager – Discovery Server) lets a device find a profile waiting for it without an activation code. The LPA (Local Profile Assistant) is the software on the device that downloads, installs and switches profiles. The interfaces between them — ES2+ between the operator and the SM-DP+, ES8+ and ES9+ towards the device — are defined in SGP.22.
How is Remote SIM Provisioning secured?
Every eUICC and every SM-DP+ carries a certificate issued under the GSMA's eSIM certificate hierarchy. A download proceeds only after the two authenticate each other, and the profile is encrypted so that only the target eUICC can install it. Providers keep their keys in hardware security modules, and the GSMA Security Accreditation Scheme for Subscription Management (SAS-SM) audits the sites that run SM-DP+ services.
How does BroadNet support Remote SIM Provisioning?
BroadNet eSIM VSM provides SGP.22 Remote SIM Provisioning for operators and MVNOs — SM-DP+ and SM-DS with HSM-backed key custody and the ES2+, ES8+ and ES9+ interfaces. GSMA SAS-SM accreditation is in progress. The same platform family powers TripoSIM, BroadNet's consumer travel eSIM brand.